PT-2024-1469

CVE-2023-6132

Published

2024-01-31

Updated

2024-03-01

Description by

CVSS 3.1

7.8

High

MetricsAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions AVEVA Edge (affected versions not specified)

Description The issue is related to the loading of unsafe DLL libraries, which could allow a malicious entity with access to the file system to achieve arbitrary code execution and privilege escalation by tricking AVEVA Edge to load an unsafe DLL.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Impacts

Researchers

Adlab

Ting Chen

Vendors

Affected products

Weakness enumeration

CWE-426: Untrusted Search Path

CWE-427: Uncontrolled Search Path Element

Related identifiers

CVE-2023-6132